Breadcrumbs

Monitoring Live Session

Live Session Monitoring enables administrators to view, monitor, suspend, resume, and terminate active user sessions in real time across the platform. This capability provides centralized visibility into user activities on multiple assets and helps organizations proactively monitor privileged access usage.

View and Terminate Live Sessions

Monitoring live sessions provides real-time visibility into user activities and helps identify suspicious or risky behavior. Administrators or users with administrative privileges can view and terminate active sessions when unauthorized or potentially malicious activity is detected.

  • Login to Sectona and select PAM from the product navigator.

  • Navigate to the Session option in the navigation bar.

  • Select Live Sessions from the sidebar.

  • Click the Live icon Live-View.png to open the currently running session.

  • View the session metadata Metadata-Log-Line.png and source information Source-Details-Line.png from the same interface.

  • Click the End icon image-20260507-063307.png in the top-right corner to terminate the session.

  • Live Session View displays only the sessions accessed through Sectona Launcher Client, Over Browser, Direct Proxy and Jump Host/Shell based sessions.

  • The supported operating systems for live sessions are Windows 10 and Windows Server 2012 or above.

  • The system allows filtering of active live sessions using parameters such as User, Asset Type, Hostname, Domain, IP Address, Risk Score, Account, Metadata, Ticket Number, Comment(s), From, and To.

  • The total number of active live sessions is displayed at the bottom of the screen.

Suspend and Resume Live Sessions

Administrators can suspend or resume sessions from the Live Session View. The system displays a status message when a session changes state.

  • Login to Sectona and select PAM from the product navigator.

  • Navigate to the Session option in the navigation bar.

  • Select Live Sessions from the sidebar.

  • Click the Live icon Live-View.png to open the currently running session.

  • To suspend an active session, click the Suspend icon pause-20260511-100611.png located at the top-right corner.

  • To resume a suspended session, click the Resume icon play-20260511-100620.png located at the top-right corner.

When a session is suspended, the user cannot access the session screen. The running session displays the message sent during suspension.

Supported session types

  • Launcher-based sessions

  • RDP over Browser

  • SSH over Browser

  • SSHD

  • RDPD

  • Jump Host based sessions